Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
File: d0d5c255-62d5-3841-a89f-c97638122db1.roa (raw, json)
Hash identifier: cw4JUCDYhKezf4dqFkSJuRNjGOES1MgBof8d9pYmRZw=
Subject key identifier: F8:6D:43:3D:0D:89:82:BC:24:F9:19:9C:42:35:32:B0:6F:54:42:54
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F432858484515877D2B97203A4576A880
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 397373
IP address blocks: 104.152.222.0/23 maxlen: 24
104.255.168.0/21 maxlen: 24
155.254.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:87:7d:2b:97:20:3a:45:76:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=95e84a33-5de0-4bf9-a99b-f299881e86c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:b6:6d:dc:84:8e:75:d9:a9:66:b6:05:de:
84:1a:00:a1:d5:61:13:25:54:19:5e:30:31:6e:0f:
60:01:c0:a9:32:1b:67:2b:0e:a5:12:f6:ee:cb:66:
e4:d5:05:4d:7b:8b:ee:f0:b0:4c:a6:1d:4a:8d:e1:
89:d5:a2:29:1d:ee:6e:f0:4b:36:9d:9a:95:35:07:
8c:96:ed:23:4a:56:54:fe:9f:41:35:17:08:e4:1e:
a1:7a:ea:b1:db:e7:f7:19:8d:a1:17:75:05:16:57:
d3:4b:97:72:d9:c1:01:04:74:12:59:fe:03:c5:96:
8b:b2:4d:48:4e:35:1b:58:6c:10:bc:5d:b1:37:cf:
d8:e0:bc:0b:b3:2e:85:d3:fa:63:a6:9f:70:0d:f8:
ac:7e:bc:ba:f3:f2:c7:13:b0:f1:3f:63:36:6f:2b:
b3:4b:70:65:a0:48:e3:29:e6:95:73:e8:0d:b8:90:
7d:c9:0a:b9:06:21:73:35:76:a0:58:b5:8e:f7:80:
dd:ee:5f:3e:65:32:d1:48:e1:03:01:67:ed:98:4a:
2a:42:07:05:04:f3:54:b5:10:3e:22:7e:b2:fb:68:
9c:ab:88:1b:7a:b6:e3:dd:4a:5f:9b:bd:c7:e1:c1:
32:a6:e9:56:ec:e9:8a:28:66:db:7d:7a:e8:29:67:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:43:3D:0D:89:82:BC:24:F9:19:9C:42:35:32:B0:6F:54:42:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
104.152.222.0/23
104.255.168.0/21
155.254.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:6f:f0:a4:77:07:9c:4b:1c:0c:44:ca:1e:fb:8f:52:bb:b0:
b4:25:88:87:59:03:33:77:5f:1c:29:17:8e:07:62:db:de:b6:
bf:93:bc:82:d6:cd:78:a3:f2:9f:0e:9b:77:f6:f8:99:ac:c6:
db:f3:fd:7f:9a:06:fd:88:31:ca:1a:35:dd:48:3c:37:39:4d:
6e:d2:1c:91:cd:00:e7:c5:05:d1:bf:03:43:36:86:92:04:82:
01:30:81:39:40:b1:40:31:54:04:fc:4f:7d:92:a8:de:dc:40:
24:e3:e6:a2:f8:42:e8:af:cf:61:36:c5:fc:cf:68:4d:a9:9b:
85:55:46:66:39:14:58:c9:24:87:2b:14:34:96:ee:fa:35:a5:
f4:5b:54:10:f8:f5:49:67:bf:05:63:ce:0d:15:38:3a:06:69:
f9:92:33:f4:aa:61:30:4a:b9:ee:ce:15:0c:05:1c:d9:7a:24:
d5:79:6b:22:52:c2:17:14:9a:a2:87:01:df:d7:3b:d4:7b:8d:
f9:b8:0d:b0:14:e1:c8:8d:63:d3:d3:62:94:1c:12:d1:7e:11:
b5:33:2e:3a:d9:c5:45:50:95:fe:f5:2d:1e:1a:34:85:18:50:
70:2b:50:6e:47:e1:e0:4e:4c:24:ff:97:e8:b7:66:ff:56:ef:
55:77:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:43:51 2025 by rpki-client